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(57) ABSTRACT 

A distributed biometric identification system incorporates 
highly mobile workstation s. The system generally includes 
a piurauty oi mopiie worlgtations and a file serveiLremotelv 
located from the workstations. "The wockstations receive 
input Diomeinc ga la, sucti 'a s llngerprint and photographic 
data^ and couples, that biometric data to _the_rem o te fiK 
server. ThrSie" server compares the input bioinetnc cjafa 
with stored biamfilric.j^taJGjdelejniine whether any o l {Ec 
s tored biometnc data matcheaJJielinpuiltoiaetcicSai a. The^ 
res ults ot tn e comparison are provided to the wo rSt a tion 
t ligtnrequmFange"(x>lnT^^^ workstation mobility's 
e mi^Dcejjv _pca\dding. a-wireless-aqd /or P STT^"'^mmun i- 
cations Unk between the workstation and" the remotely 
locatedjLle^sery;e r. Workstation mobility is further improved 
'SyTiousing the workstation in a self-contained, compart- 
mentalized carrying case. Workstation mobility may be even 
further enhanced by housing the workstation in a so-called 
lunchbox configuration having a main body, a front panel 
hinged to the main body, and a back panel hinged to the main 
body. The front and back panels each have a stowed position 
adjacent the main body, and a deployed position away from 
the main body. When the panels are in their stowed 
positions, the workstation (i.e., main body, front panel, and 
back panel) is a compact, portable unit. 

6 Claims, 6 Drawing Sheets 
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DISTRIBUTED MOBILE BIOMETRIC link (e.g., a land-based or satellite -based mobile 

IDENTIFICATION SYSTEM WITH A radiotelephone) that may be used to place the mobile work- 

CENTRALIZED SERVER AND MOBILE station in communication with the centralized server. The 

WORKSTATIONS centralized server includes a transaction management 

5 subsystem, a database for storing fingerprint minutiae of 

BACKGROUND OF THE INVENTION individuals that are of interest to users of the system, a 

matching controller subsystem coupled between the trans- 

(a) Field of the Invention action management subsystem and the database for match- 
The present invention relates generally to identification ing fingerprints of individuals to fingerprints stored in the 

systems. More particularly, it relates to a method and appa- jq database, and an image storage and retrieval subsystem for 

ratus for identifying individuals based on biometric infor- storing and retrieving electronic images of fingerprints and 

mation such as fingerprints and photographs. photographic images of individuals. 

(b) Description of Related Art Th^ above-described mobile workstation is preferably 
In the past, identification of individuals that are processed embodied in a substantially portable computing environ- 
by the Immigration and Naturalization Service (INS) or 15 ment havmg, for example, a portable computer, a portable 
other governmental agencies, for example, has been a rela- ^^"'"^ ^°^P^^^ ^° computer, a portable fingerprint 
lively slow process. Although many governmental agencies ^^"^^'^ ^°^P^^^ computer, and a substaotiaUy por- 
maintain large databases containing fingerprints, photo- ^^^^"^ two-way communications hnk (e.g., modem) coupled 
graphic information and other relevant data pertaining to computer. Preferably, the communications link 
individuals that use the services of the respective agencies, 20 mdudes a land-based or sateUite-based mobile radiotele- 
no known system has been able to quickly search and phone, 

retrieve information relating to identification and interaction one embodiment of the present invention, the portable 

with these individuals. For example, the INS interacts with computer includes a so-called "notebook" or "laptop" com- 

and is required to identify milUons of persons each year, P^^^^ having for example 32 MB of RAM, an AC power 

including immigration law violators, immigration benefit 25 supply, and an AC power cable. AddiUonally, the portable 

applicants, individuals requesting asylum, travelers, and computer is outfitted with an MRT VideoPort PC card and a 

visitors to the United States. Many encounters are processed Megahertz 33.6 modem/elhernet card. The MRT VideoPort 

under severe time constraints and with insufficient access to ^^^^ sgtv&s as the interface between the portable com- 

relevant information. P^*^^ hardware and the fingerprint scanner and the color 

A co-pending, commonly owned patent application. Ser. '° LTt v-^ o "f^^u t° 'u^ 

No. 08/937,957 filed on Sep. 25. 1997 addresses this prob- VideoPort PC card to the Angeiprmt scanner and the 

lem by providing a distributed biometric identification sys- "^l"'/'"^"^- T^e Megahertz 33.6 modem/ethernet card 

tem and architecture for rapidly identifying individuals f/l^"*^ the portable computer the abihty to netwoA to the 

using fingerprint and photographic data. The disclosed INS server from local and remote sites Specifically net- 

aichitecture includes a centralized INS server, a pluraUty of lo^al sites can be accomphshed through the 

distributed cUent workstadons that are remotely located Ethernet funcaonahly of Ae card. Remote networking can be 

from the centrahzed server, and a wide area telecommuni- ™Pl>^h«> !^°^g^*:f,::^ of the 33.6 baud modem 

cations network interconnecting the client workstations to fi^ncUonaJ'ty of the card. AddiUonally, the required network 

the server. TTie centralized server includes a transaction ^ t ',^5'^°°' "'^^^ f° "^f "^iflgu^toi. The 

management subsystem, a database for storing fingerprint P°"='"'= ""°P"'^^ be configured with Windows 95 

minutiae of individuals that are of interest to user! of the ^'T ^^^.P?"^- P°«^''l^ 

system, a matching controller subsystem coupled between .'^^^ ^ configured with a user-fnendly and 

the transaction management subsystem and the database for '^^^''''^ Sraphica^ user mterface using, for example, 

« ™ • * p ■ J- -J 1 * c • 4 * J • Microsoit Visual C++ soitware, and a structured laneuase 

matchmg fingeipnots of mdividuals to fingerprints stored in /^^^^ \ . . i • r ^ ^^^^^ language 

the database, and an image storage and retrieval subsystem ^^2. > ' '^TTu' T '1 "^""^r^ f 

for storing and retrieving electronic images of fingeiprints ^""^^^'^ ^ °? '^^/^^^ product from Oracle®. Hie SQL 

and photographic images of individuals. '"^^^^-^^ f^^^^aUon of the Oracle® level of commu- 

, , nication within the system. That is, when the system user 

The above-described system is highly effective in allow- ^^^^^^ , ^^e Oracle® component that accept the query 

mg a large number of remotely located users to access, needs to be able to communicate the query over the network 

search compare and retrieve various types of biometric to another Oracle® component. The SQL language performs 

idenufying data/mformation. The present invention is the operation of enabling the query communication between 

directed to an improvement wherem user location opUons, Qracle® components. The portable computer's screen dis- 

user mobiUty, and overall user access to the distributed ^ menu-driven screens from which users may select 

biometnc system is even further enhanced. ^^^^-^^ ^^^^^^ (^^^^ as search and cnroU, search only, 

SUMMARY OF THE INVENTION ^^"^^ functions) that arc to be performed by the system. 

In another embodiment of the present invention, the 

The present invention may be embodied in a distributed laptop computer, camera, fingerprint scanner and modem are 

biometric identification system having highly mobile user electronically coupled together and conveniently housed in 

workstations. More particularly, the invention may be 60 a carrying case. For example, a two-piece, hinged rugged 

embodied in a distributed, mobile biometric identification construction carrying case may be outfitted with a foam 

system and architecture for rapidly identifying individuals template having cutouts for holding in place the various 

using fingerprint and photographic data. The disclosed components, a power strip for accepting the power cord 

architecture includes a centralized server, and a plurality of connections of the various components and providing 12 

distributed, mobile client workstations that are remotely 65 volt AC power thereto, and a 12 volt DC invertor having a 

located from the centralized server. The mobile workstation 12 volt extension cord for coupling the strip to an alternative 

includes a substantially portable two-way communications power source, for example, a cigarette lighter of an auto- 
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mobile. The power strip preferably includes surge suppres- encountered during the benefit servicing process to approve 

sor circuitry to protect the various components from damage or deny applications or petitions for immigration benefits, 

due to power surges. -j^^ ^^^^ processing center reports to the workstation the 

In still another embodmient of the invention, the above- number of hits, if any. The workstation may then call up the 

descnbed portable computer may be housed in a portable. 5 biometric data and/or the biodata for each hit in order to 

substantiaUy reclangula^ sel^contained unit known gener- ^^^-^^ ^ determination of whether the "hit" is 

ally as a lunchbox CPU. TTie lunchbox, aocordmg to tbe the individual in question, 

present invention, mcludes a main body, a firont panel and a ^ 

back panel. The front and back panels are hinged to the main present invention may be embodied in a mobile 

body such that each may be folded up to a stowed position workstation for use in connection with a distributed biomet- 

against the main body, or folded down to a deployed position identification system, said workstation comprising: a 

away from the main body. In general, the main body houses portable computer; a biometric data input system coupled to 

the main computing boards and a display screen, the front portable computer; a portable communications terminal 

panel houses a keyboard, and the back panel houses the coupled to said portable computer; said communications 

camera, the fingerprint scanner and the modem. When in .5 terminal capable of initiating the estabUshment of a com- 

their stowed positions, the front and back panels and the munication link between said workstation and a file server 

main body combine to form the portable lunchbox. When remotely located from said workstation, at least a portion of 

the front panel is deployed, it exposes the keyboard and the communications link comprising a wireless communi- 

display screen on the main body. When the back panel is cations link; said biometric data input system capable of 

deployed, it exposes the camera, fingerprint scanner and y^^^^^^^S input biometric information and providing said 

modem. input biometric information to said computer; said computer 

The following describes the procedures that can be fol- Programmed to control said portable communications ter- 

lowed when using the above^escribed system in connection ^"'^^ ^° ^""^ ^^'^ imtiation of said communication hnk 

with immigration services. When an individual is identified between said workstation and said file server, and transmit 

as an undocumented aUen, he/she is taken to a mobile 25 ^^^^ biometric information over said communication 

workstation. The workstation operator chooses the "search '^^^^^^ 

and enroll" feature. The initiation of "search and enroll" The present invention may also be embodied in a mobile 
brings up a screen that prompts the operator to first place the workstation for use in connection with a distributed biomet- 
individual's left index finger on the fingerprint scanner. Tbe ric identification system, said workstation comprising: a 
screen tiien prompts the operator to place the individual's 30 portable computer; a biometric data input system coupled to 
right index finger on the fingerprint scanner. Quality analysis said portable computer; a portable communications terminal 
is performed on the scanned fingerprint data to make sure coupled to said portable computer; said communications 
that the fingerprint image is of sufiScient quality. The screen terminal capable of initiating the establishment of a corn- 
then turns on the camera and prompts the user to snap a munication link between said workstation and a file server 
photograph of the individual. 35 remotely located from said workstation, at least a portion of 

After the picture is taken, the operator is retumed to the communications Unk comprising a public switched 

entry screen for enuy of non-biometric data (referred to telephone network (PSTN); said biometric data input system 

herein as "biodata"). The user then enters the aUen*s name, capable of receiving input biometric information and pro- 

birth date, age and any other information Oiat can be viding said input biometric information to said computer; 

obtained. The workstation associates all entered "biodata" 40 computer programmed to control said portable com- 

with the current biometric data and with the current request. munications terminal to begin said initiation of said com- 

Upon completion of the biodata screen, a submit button is munication link between said workstation and said file 

pressed. The submit button initiates sending the data via server, and transmit said input biometric information over 

modem to the file server located at a remote processing said communication link to said remote file server, 

center A key feature of the invention is that the data is 45 In an alternative embodiment of the above-described 

transmitted to the processing center over a widely available combination, the portable communications terminal com- 

communications link such as the public switched telephone prises a telephone dialing apparatus; and said initiating 

network (PSTN), land -based radiotelephone infrastructure, comprises dialing a telephone number to establish a tele- 

or satellite-based communications. phone line connection with said remotely located file server 

The processing center takes over and starts processing the 50 over said PSTN, 

input data, freeing the workstation to begin enrolling another The present invention may be further embodied in a 

individual. A status indicator on the bottom of the worksta- mobile workstation for use in connection with a distributed 

tion screen indicates the status of a particular transaction, biometric identification system, said workstation compris- 

The data processing center searches a number of databases, ing: a portable computer; a fingerprint scanner coupled to 

each of which has its own meaning. The databases are 55 said portable computer; a camera coupled to said portable 

referred to generally as "lookout", "recidivists", "asylum", computer, a portable communications terminal coupled to 

and "benefits". The lookout database contains information said portable computer; said communications terminal 

on individuals with criminal records on file with the Immi- capable of initiating the estabUshment of a communication 

gration and Naturalization Services, or who are considered link between said workstation and a file server remotely 

to be "lookouts" posing potential threats to the health and 60 located from said workstation, at least a portion of said 

safety of border patrol personnel. The recidivists database communications link comprising a wire less communications 

contains information on individuals who have attempted to link; said fingerprint scanner capable of receiving input 

enter the U.S. illegally on multiple occasions. The asylum fingerprint information and providing said input fingerprint 

database contains information on individuals encountered information to said computer; said camera capable of receiv- 

during an asylum application process. The asylum informa- 65 ing input photographic information and providing said input 

tion is checked to detect and reduce immigration fraud. The photographic information to said computer; said computer 

benefit database is used to verify the identity of individuals programmed to control said portable communications ter- 
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minal to begin said initiation of said communication link to said main body, and a back panel binged to said main 
between said workstation and said file server, and transmit body; said front panel having a stowed position adjacent said 
said input biometric information over said communication main body and a deployed position away from said main 
link to said remote file server; said computer further pro- body; said back panel having a stowed position adjacent said 
grammed to receive from said file server over said commu- 5 main body and a deployed position away from said main 
nication link stored fingerprint and photographic informa- body; a biometric data input system coupled to said portable 
tion stored at said file server that matches said input computer and at least partially housed in said back panel; a 
fingerprint and photographic data transmitted from said portable communications terminal coupled to said portable 
workstation to said file server; said computer further pro- computer and at least partially housed in said back panel; 
grammed to receive from said file server over said commu- 10 said communications terminal capable of initiating the 
nication link information indicating that no stored finger- establishment of a communication link between said work- 
print or photographic information at said file server matches station and a file server remotely located from said 
said input fingerprint or photographic data transmitted from woricstation, at least a portion of said communications link 
said workstation to said file server. comprising a wireless communications link; said biometric 
The present invention may fiirther be embodied in a 15 data input system capable of receiving input biometric 
mobile workstation for use in connection with a distributed informarion and providing said input biometric information 
biometric identification system, said workstation compris- to said computer; said computer programmed to control said 
ing: a portable carrying case containing a portable computer, portable commimications terminal to begin said initiation of 
a biometric data input system coupled to said portable said communication link between said workstation and said 
computer, a portable communications terminal coupled to 20 file server, and transmit said input biometric information 
said portable computer, and a power strip for coupling power over said communication link to said remote file server, 
to said computer, biometric data input system, and commu- The invention itself, together with further objects and 
nications terminal; said communications terminal capable of attendant advantages, will best be ^mderstood by reference 
initiating the establishment of a communication link to the following detailed description, taken in conjunction 
between said workstation and a file server remotely located 25 ^yith the accompanying drawings, 
from said workstation, at least a portion of said communi- 
cations link comprising a wireless communications link; BRIEF DESCRIPTION OF THE DRAWINGS 
said biometric data input system capable of receiving input r ju- * - ^ ^ ^ 
biometric information and providing said input biometric } diagram of a d^tnbuted bioinetric idenUfica- 
information to said computer; said computer programmed to 30 tion system havmg mobile distnbuted workstations embody- 
control said portable communications terminal to begin said ^ presen mven ion. 

initiation of said communication link between said work- ^ hardware-based diagram of the mobHe dis- 

station and said file server, and transmit said input biometric tributed workstation shown in FIG. 1, wherein the portable 

information over said communication link to said remote file computer of the mobile workstation includes a laptop or 

server. 35 notebook computer. 

The present invention may also be embodied in a method ^ a more detailed diagram of the mobile work- 

of coupling biometric data to a file server for use in ^^^^on shown in FIG. 2, wherein the workstation incorpo- 

connection with a distributed biometric identification ^^^^^ ^ portable case. 

system, the steps comprising: gathering input biometric data FIG. 4 is a hardware-based diagram of the mobile dis- 

at a first location; initiating the establishment of a commu- ^ tributed workstation shown in FIG. 1, wherein the mobile 

nication link between said first location and a file server workstation is housed in a lunchbox configuration, 

remotely located from said first location, at least a portion of FIGS. 5 and 6 further illustrate the lunchbox configuration 

said communications link comprising a wireless communi- shown in FIG. 4. 

cations link; and transmitting said input biometric informa- pj^. 7 is a diagram illustrating the software operations 

tion over said communication Imk to said remote file sender. ^^at perform the biometric identification functions of the 

In an alternative embodiment of the present invention, the portable computers shown in FIGS. 1-6. 
above described method fiirther comprises the step of 

receiving at said first location over said communication link DESCRIPTION OF THE PREFERRED 

stored biometric information that matches said input bio- EMBODIMENTS 

metric data transmitted from said first location to said file t> r • . j i j • r 

By way of introduction, a general description of the 

invention and the disclosed embodiments thereof will now 
In another alternative embodiment of the present provided. The present invention may be embodied in a 

invention, the above described method further comprises the distributed biometric identification system having highly 
step of receiving at said first location over said communi- 55 ^jQ^ile user workstations. More particularly, the invention 
cauon link mfonnaUon indicating that no stored biometric jj^^y be embodied in a distributed, mobile biometric identi- 
mformation at said file server matches said input biometric fixation system and architecture for rapidly identifying indi- 
data transmitted from said first location to said file server. ^jj^^ fingerprint and photographic data. The dis- 

In still another alternative embodiment of the present closed architecture includes a centralized server, and a 
invention, the above-described method further comprises so plurality of distributed, mobile client workstations that are 
said initiating step comprising dialing a telephone number to remotely located from the centralized server. The mobile 
establish a telephone fine connection with said remotely workstation includes a substantially portable two-way corn- 
located file server. munications link (e.g., a land-based or satellite-based mobile 
The present invention may also be embodied in a mobile radiotelephone) that may be used to place the mobile work- 
workstation for use in connection with a distributed biomet- 65 station in communication with the centralized server. The 
ric identification system, said workstation comprising: a centralized server includes a transaction management 
portable computer having a main body, a front panel hinged subsystem, a database for storing fingerprint minutiae of 
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individuals that are of interest to users of the system, a substantially rectangular, self-contained unit known gener- 

matching controller subsystem coupled between the trans- ally as a "lunchbox" CPU. The lunchbox, according to the 

action management subsystem and the database for match- present invention, includes a main body, a front panel and a 

ing fingerprints of individuals to fingerprints stored in the back panel. The front and back panels are hinged to the main 

database, and an image storage and retrieval subsystem for 5 body such that each may be folded up to a stowed position 

storing and retrieving electronic images of fingerprints and against the main body, or folded down to a deployed position 

photographic images of individuals, away from the main body. In general, the main body houses 

Hie above-described mobile workstation is preferably the main computing boards and a display screen, the front 

embodied in a substantially portable computing environ- panel houses a keyboard, and the back panel houses the 

ment having, for example, a portable computer, a portable camera, the fingerprint scanner and the modem. When in 

camera coupled to the computer, a portable fingerprint their stowed positions, the front and back panels and the 

scanner coupled to the computer, and a substantially per- main body combine to form the portable lunchbox. When 

table two-way communications link (e.g., modem) coupled the front panel is deployed, it exposes the keyboard and the 

to the computer. Preferably, the communications link display screen on the main body. When the back panel is 

includes a land-based or satellite-based mobile radio tele- ^5 deployed, it exposes the camera, fingerprint scanner and 

phone. modem. 

In one embodiment of the present invention, the portable The following describes the procedures that can be fol- 

computer include s a so-called "nol f book" or.,"laptop" com- lowed when using the above-described system in connection 

puter having for example 32 MB of RAM, an AC power with immigration services. When an individual is identified 

supply, and an AC power cable. Additionally, the portable on as an undocumented alien, he/she is taken to a mobile 

computer is outfitted with an MRT Mdeo P^rt PC card and a workstation. The workstation operator chooses the "search 

•Me^ ertr33.6 modem/ethemet ca rd. ThrMRT VideoPort and enroll" feature. The initiation of "search and enroll" 

PC card serves as the interface between the portabl e com- brings up a screen that prompts the operator to first place the 

puter hardware and the fingerprint scanner ana me color individual's left index finger on the fingerprint scanner. The 

qameU-T'^ n^RT video catic-is-dso-provided to connect the 25 screen then prompts the operator to place the individual's 

MRT VideoPort PC card to the fingerprint scanner and the right index finger on the fingerprint scanner Quality analysis 

color camera. The Megahertz 33.6 mod em/ethemet_card is performed on the scanned fingerprint data to make sure 

provides the portable computeL,tlie_ability tn netwnrV.tn,thp that the fingerprint image is of sufficient quality. The screen 

tNS"server from loca l and remote sitesr Specifically, net- then turns on the camera and prompts the user to snap a 

'^Qikmf^otn"ldcal"sites can be accomplished through the 30 photograph of the individual, 

ethernet functionality of the card. Remote networking can be After the nicture is taken , the operator is returned to the A ^ 

accomplished through the use of the 33.6 baud modem entry screen for en ta^y of non-biometric da ta (referred to J A t ^ 

functionality of the card. Additionally, the required network herein as " biodata'Q . llie user then enters the alien's name, / O 

and telephone cables arc also used in the configuration. The birth dat6,^age and any other information that can be 

portable computer may be configured with Windows 95 35 obtained. The workstation associates all entered "biodata" 

operating system software, for example. The portable com- with the current bio metric data and with the current request, 

puter may be further configured with a user-fidendly and Upon completion of the biodata screen, a submit button is , 

intuitive graphical user interface using, for example, pressed. The submit button initiates sending the data via ( f) 

Microsoft Visual C++ software, and a structured language modem to the file server located at a remote processing^ -a^S^^^ ^ 

(SQL) based, client-server, front end query tool. The SQL 40 center^ A key feature of the invention is that the data I 0LP^ 

soft ware is an off the shelf produc t from Oracle®, ihe JjtjL transmitted to the processing center over a widely available 

soitware is iko foimdation of the Oracle® level of commu- communications Hnk such as the public switched telephone 

nication within the system. That is, when the system user network (PSTN), land-based radiotelephone infrastructure, \< ) ^^SS 

enters a query the Oracle® component that accepts the query or satellite-based communications. ' ^ ' 

needs to be able to communicate the query over the network 45 The processing center takes over and starts processing the 

to another Oracle® component. The SQLlanguage performs input data, freeing the workstation to begin enrolling another 

the operation of enabling the query communication between individual. A status indicator on the bottom of the worksta- 

Oracle® components. The portable computer's screen dis- tion screen indicates the status of a particular transaction. 

plays menu-driven screens rrom wmcn users may select The data processing center searches a number of databases, 

specific functi ons (such as search an d enroll^ se arch only. 50 each of which has its own meaning. The databases are 

ana verity tunctions) that are to be performed by the system. referred to generally as "lookout", "recidivists", "asylum", 

In anoihcr embodiment of the present invention, the and "benefits". The lookout database contains information 

laptop computer, camera, fingerprint scanner and modem are on individuals with criminal records on file with the Immi- 

electronically gaMpled..logf.thrr„and ^"nveniept^y_)^Q^'^edjp gration and Naturalization Services, or who are considered 
a carrying_cas c. For example, a two-piece , h inged nigged^ 55 to be "lookouts" posing potential threats to the health and 

construction carrying case may be outfitted with a foam safety of border patrol personnel. The recidivists database 

mplate having cutouts for holding in place the various contains information on individuals who have attempted to 

components, a power strip for accepting the power cord enter the U.S. illegally on multiple occasions. The asylum 

connections of the various components and providing 12 database contains information on individuals encountered 

volt AC power thereto, and a 12 volt DC invertor having a eo during an asylum application process. The asylum informa- 

12 volt extension cord for coupling the strip to an alternative tion is checked to detect and reduce immigration fraud. The 

power source, for example, a cigarette lighter of an auto- benefit database is used to verify the identity of individuals 

mobile. The power strip preferably includes surge supprcs- encountered during the benefit servicing process to approve 

sor circuitry to protect the various components from damage or deny applications or petitions for immigration benefits, 

due to power surges. 65 The data processing center reports to the workstation the 

In stiQ another embodiment of the invention, the above- number of hits, if any. The workstation may then call up the 

described portable computer may be housed in a portable, biometric data and/or the biodata for each hit in order to 
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review it and make a determination of whether the "hit" is operating on the Windows 95® environment. The mobile 

the individual in question. computing terminal 35 gains access to the central server 10 

Referring now to FIG. 1, a diagram of a system employing ^^^^ P^^s including: the radiotelephone 40, the 

the present invention is shown. The system generally satellite connecUon 45. the land line connecUon 50, or direct 
includes a central server 10, a set of software clients 20, and 5 connectton to the LAN/WAN 52. The use of a radiotele- 

a mobUe access station 30. P^°^^ establish commumcation preferably includes the 

^ , ..... use of a three-Watt cellular telephone known in the art as a 

The central server 10 provides backend functionahty for , ^« , f , 

iLM^*' , .J . r bag phone . The use of a bag radiotelephone provides a 

ihc systEi™^-ceQtral server 10 provides a vanety of ^^^^ ^^^^^ ^ 

funcuons mcludmg receivmg mput fingerprint images and "hand-held" radiotelephone. When the mobile com- 

photo image s, image storage and retrieval management, ^^^^^^ 35 established communication to the central 

•.ransacon management and fingerprint matching ^^rver 10, it is does so throtigh an access server 62. TTie 

functionality^ along wiUi daUbases mcludmg asylum , ^^^ss server 62 performs the function of verifying the 

lookout , T)eneuts and recidivism . These functions are -j ... i?.t. ^ ■ ... 1 

' ""^""^"^ • "^"^ ■"""■y"* idenuty of the entity who is attempting to gam access to the 

available for use by the user at a mobile access station 30. ^^^^^ ^^ ^^^^^^ aforementioned com- 

Database fiinchons may mclude. but are not limited toJhe m„nication devices, the mobile access station 30 includes a 

^^^^^^S^^Pt^^s,'''^'''. ?'^"" ' ]°' color camera Sg and a fingerprint scanner £o. The color 

graphical factory, aGcl.Bto^ggg|^ Tie database may also ^era Hi an Ta fingerp rint scanner bO are ulk d to gather 

contain information as^to whether an ind ividu al is.^ . . ^ °, ^ • j- j i - ^n. i 

, ., , / biometnc data from the individual in question. The color 

dangerous, a repeat immigration oiienaer, or engible t or cc « +1, a - 

^ P , --il- — — , , , — 1— r 20 camera 55 may be a digital camera or any other device 

-asyhmi and benefits The t^kout database oontams rnfor- ^^j^^le for obtaining digital images of apprehended ind i- 
nHtmnonindi^ais with crim i iif. 1 rr - mtrls nn filr, with thr fingerprint scanner 60 is provided for obtaining 

Immigration and Naturalization Services, or who arc con- MfS!Kt „f iu. • j- -j i> a _ • . j- •. i c 

. i ... I. m I II I I , . ■ fflgita images of Ihe mdivtdual s fingerpnnts, digital fin- 

t - 1^- i""l-ui* puMue polcuM threats to the gerprinf scanners are well known in the art lie cotor 
healfii and safety of border patrol personnel. TTie recidivists 55 fingcn,rint s canner 60 areJn to l Wto ' . 

database contains inrormation on mdividuals who have , i ^ \ .1 , t- . ^ nT----'-i"=i r*^-" ' ' '• 1 1 j 

, * *u Trc -11 11 1** 1 tht mubile''i:umputiDg'tgf MnaI 35 via , a video c apture card^ 

aUempted to enter theUS^meg^ on multiple occasions. .^^^ieb-^emrff lrrth e ari. ' ^ 

ine asylum database contains mdividuals encountered our- , 1 . 

1 1- ry» I f In an alternative embodiment, a two-piece rueeed con- 

mg an asylum application process. The asylum mformation , . ^. ' ^ . , 

is checked to detect and reduce immigration fraud. TT^e ° (f* ^} '^^y "f.^.^" '° '^°'f„« 

benefit database is used to verify the identity of individuals ^° "f"'* computmg termmal 35. the radiotelephone 40, the 

encountered during the benefit servicing process to approve ""l"' ^T*^* fingerprint scanner 60. me portable 

or deny appUcations or petitions for immigration benefits. " '"""'''I'LTT'^^ '"^ 

^ . , « , , water damage. Additionally, the portable case 65 elimmates 

The centr^ server 10 also has access to software clients j^e need for field personnel to connect the various compo- 
20. These software cliente 20 aUow the system user to begin 35 nents of the mobile access station 30 together each time the 

processing paperwork regarding an apprehended individual system is to be used. Rather the portable case embodiment 

before retummg to an ofEce to complete processing of the encases the connected hardware and creates one self- 

mdividual. The software cUents 20 are accessed from mobUe contained unit providing a power connection by which to 

access stations 30 through the central server 10. ^^^^ the unit. The power connection may be a 120 VAC 
Traditionally, paperwork on apprehended individuals has ^ connection. Alternatively, a power connection may be 

been typed on a typewriter and photocopied as necessary. ^ptg^ to receive 12 VDC input from an automobile 

The software cUents 20 and the central server 10 allow the cigarette lighter. The case may be outfitted with a foam 

system user to enter relevant biodata from the apprehended template having cutouts for holding in place the various 

individual into a database. Tlie biodata may then be accessed components, a power strip for accepting the power cord 

and printed as needed by all authorized users of the central connections of the various components and providing 12 

server 10. Software clients 20 may mclude detention facility „„]t ac power thereto, and a 12 volt DC inverter having a 

mformauon, such as the locaUon of a prisoner within the 12 volt extension cord for coupling the strip to an alternative 

pnson system; and immigrant benefits and asylum informa- p„^„ sj,„,„_ fo, example, a cigarette lighter of an auto- 

mobile. The power strip preferably includes surge suppres- 
The mobile access station 30 shown in FIG. 1 includes a 50 sor circuitry to protect the various components from damage 

mobile computing terminal 35, and remote access compo- due to power surges. 

nents such as a radiotelephone 40, a satellite connection 45, piG. 4 illustrates another embodiment of the mobile 

and a landHne connection 50, as weU as appropriate hard- access station 30 of the present invention. This alternate 

ware for connecting to the above-noted remote access com- embodiment varies from the previous embodiment in that 
ponents and other input and output devices. Hardware for 55 the mobile computing terminal is housed on a so-called 

gaining remote access may include a modem or some other "lunchbox" configuration 70. The lunchbox 70 is a self 

communication-type card that may be interfaced with the contained processing unit and carrying case. The processing 

mobDe computing terminal 35. Remote access components u^it and operating system of the lunchbox 70 are identical to 

provide the system user a communication path between the that of the mobile computing terminal 35. The lunchbox 70 
mobile computing terminal 35 and the central server 10. go is capable of accepting a number of different computer 

A more detailed illustration of the mobile access station cards, which perform the function of interfacing to the 

30 and its associated components are shown in FIG. 2. As radiotelephone 40, the color camera 55, the fingerprint 

illustrated, the mobile access station 30 includes a mobile scanner 60, the satellite connection 45, and the land line 

computing terminal 35, a radiotelephone 40, a satellite connection 50, Additionally, the lunchbox 70 configuration 
connection 45, a land line connection 50, a color camera 55, 65 houses the radiotelephone 40, the color camera 55, and the 

and a fingerprint scanner 60. The mobile co mputing terminal fingerprint scanner 60 in a manner similar to the portable 

35 may be embodied in aportable noteboot^aptop computer case 65. 
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The luDchbox 70 configuration offers the advantages of represents a Windows 95 environment. The icons represent 

being lightweight, small, low cost, self contained, and easy the method of interface to the central server 10. After the 

to maintain. Another distinct advantage is the addition of a network connection is established, the system user is 

bright screen that can be read in bright daylight, as opposed prompted to enter verification. Upon completion of 

to a conventional laptop LCD screen that is difScult to read 5 verification, the system user may elect to enroll the appre- 

in bright sunshine. Similar to the portable case 65 htnded individual into the database located at the central 

configuration, the only external component to the lunchbox server 10 After selecting the enroll option, the identini file 

70 is a power cord. Power may be provided either using 120 "^'^i^^f^i^.f As enroUment contmues the 

VAC or 12 VDC mrtcapl6.dll file 120 performs the function of controlling 

^ , , „^ ^ tlie color camera and fingerprint scanner in a manner to 

Side and plan views of the lunchbox 70 configuration can lo ^^^^^ necessary information from the individual. The video - 

be seen in FIGS. 5 and 6. The lunchbox 70 configuration images are compressed by the software 140 under the 

includes a main housing 75, a keyboard 80, a foldable front control of the imagemob.exe file 130, The information is 

panel 85, a foldable back panel 90, a display screen 95, and then transferred to the transaction manager 150 via the 

a processing unit (not shown) and associated interface cards ident21m.exe file 100 over the established communication 

(not shown) for accessing the radiotelephone 40, the color 15 liuj^ xhe transaction manager 150 forwards the information 

camera 55, and the fingerprint scanner 60. to the central server 10. Queries as to the history of the 

The front panel 85 folds down from an upright and locked apprehended individual are also forwarded to the central 

position that covers the display screen 95 to a downward server 10 in a simUar fashion. Information regarding the 

position which reveals the keyboard 80. Likewise, the back ^^^^"^ °^ individual is returned to the idcnt21m.exe file 

panel 90 folds down to permit user access to the radiotcle- ^ ^^^.^^^ .^^^^^ transaction manager 150. The received 

phone 40, the color camera 55, and the fingerprint scanner ^^oumtion is transferred to the screen display usmg the 

X - J 4 * 1 r • *L r * on-screen display software 160. 

60. A major advantage to this particular feature is the tact _ , , ^« . . . . . ^ , , 

that when the both the front and back panels 85. 90 are V'V^°^'^^ wortetetion 30 described herem is preferably 

1 J J 1 1 J • -1. • 1 L J embodied m a substantially portable computing environ- 

closed and locked against the main housmg 75 the keyboard * u ■ p ™i -*ui/ i* 

on *u J- 1 ae A *u • . j * 25 ^ent havmg, for example, a portable (e.g., a laptop or 

80, the display screen 95, and other associated components ^^tebook) computer, a substantially portable camera 

40, 55, and 60 are protected from damage. ^^p^^^ computer, a substantially portable fingerprint 

FIG. 7 illustrates the software operations performed by scanner coupled to the computer, and a substantially por- 

the mobile workstation 30. As shown in FIG. 7, the table communications Hnk coupled to the computer and 

idenaim.exe file 100 is an executable file that is used on the preferably taking the form of a modem embodied in a 

mobile biometric identification system. The ident21m.exe kad-based or satelhtc -based mobile radiotelephone, 

file 100 is the file that controls the fim^^^ The portable computer described herein preferably 

termmal 30. The identmi file 110 holds imtializaUoninfor- ^^^^^^^^^ for example, 32MB of RAM, an AC power supply, 

mation that IS used to miUalize the idenaim.exe file 100, the power cable. Additionally, the portable computer 

mrtcapl6.dll file 120, and unagemob.exe file 130. The 3^ is outfitted with an MRTVideoPort PC card and a Megahertz 

ident.im file 110 contains mformaUon pertaining to the 33^ modem/ethernet card. The MKT VideoPort PC card 

hardware that is interfaced to the various software functions. ^^^^^ ^^^^^^^ between the portable computer hard- 

For exanaple if a new fingeiprmt scanner is used, the ^^^^ fingerprint scanner and the color camera. An 

ident.im file 110 is the only file that must be changed to j^r^ video cable is also provided to connect the MRT 

accommodate the hardware change. ^ VideoPort PC card to the fingerprint scanner and the color 

The mrtcapl6.dll file 120 performs the function of con- camera. The Megahertz 33.6 modem/ethernet card provides 

trolling video captures in the system. Specifically, the the portable computer the ability to network to the INS 

mrtcapl6.dll file 120 controls the fingerprint scanner 60 and server fi-om local and remote sites. SpecificaUy, networking 

the color camera 55. After digital images are captured by the from local sites can be accomplished through the ethemet 

mrtcapl6.dll file 120, they are passed to the imagemob.exe 45 functionality of the card. Remote networking can be accom- 

file 130, which performs the function of compressing and piished through the use of the 33.6 baud modem fiinction- 

extracting digital images. The imagemob.exe file 130 makes ality of the card. Additionally, the required network and 

software calls to a commercially available software package telephone cables are also used in the configuraUon. The 

140 known commercially under the tradename Cogent 140. portable computer may be configured with Windows 95 

The Cogent software 140 performs the processing of the operating system software, for example. The portable com- 

images received by the imagemod.exe file 130. p^ter may be further configured with a user-friendly and 

The idcnt21m.exe file 100 is interfaced to a transaction intuitive graphical user interface using, for example, 

manager 150 which is located at a remote site. The trans- Microsoft Msual C++ software, and a structured language 

action manager 150 performs the function of receiving the (SQL) based, client-server, front end query tool. The SQL 

image and biodata, as well as providing a software pathway 55 software is an off the shelf product from Oracle®. The SQL 

from the ident21m.exe file 100 to the central server 10, software is the foundation of the Oracle® level of commu- 

which is also located at a remote site. Additionally, the nication within the system. That is, when the system user 

ident21m.exe file 100 controls the on-screen display. enters a query the Oracle® component that accepts the query 

On-screen display software 160 (available from Accusoft) is needs to be able to communicate the query over the network 

used to create various gray-scale on-screen displays. The so to another Oracle® component. The SQL language performs 

Accusoft 160 software also provides various display utilities the operation of enabling the query communication between 

that aid in processing on-screen graphics. The i213.jpg file Oracle® components. The portable computer's screen dis- 

170 is a graphics file that is printed when needed. Typically plays menu-driven screens from which users may select 

the i213.jpg file 170 is a form that is required when specific fimctions (such as search and enroll, search only, 

processing an apprehended individual. 55 and verify functions) that are to be performed by the system. 

When an individual is apprehended, the system user Of course, it should be understood that a range of changes 

selects an icon from the on-screen display, which preferably and modifications can be made to the preferred embodiment 
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described above. For example, the present invention is 
described in connection with a particular hardware and 
processing structure for transmitting and receiving live 
biometric data. However, a wide variety of transmitting and 
receiving structures could be utilized as long as the essential 
mobile distributed workstation features described herein are 
present. It is therefore intended that the foregoing detailed 
description be regarded as illustrative rather than hmiting 
and that it be understood that it is the following claims, 
including all equivalents, which are intended to define the 
scope of this inventioa 
What is claimed is: 

1. A distributed biometric enrolling and identification 
system for enrolling and identification of individuals by a 
user of a stand-alone workstation, the enrolling and identi- 
fication system comprising a centralized server having a 
plurality of databases each having a defined meaning related 
to the individuals to be enrolled or identified and one or 
more stand-alone workstations in communication with the 
centralized server, wherein one or more of said stand-alone 
workstations comprise: 

a portable computer; 

a biometric data input system coupled to said portable 
computer and receiving biometric data of an individual 
to be enrolled or identified for transfer to said portable 
computer; 

a user input terminal for enabling a user to input to the 

portable computer non-biometric data (biodata); 
a portable communications terminal coupled to said por- 
table computer; 
said communications terminal initiating establishment of 
a communication link between said workstation and the 
centralized server remotely located from said 
workstation, at least a portion of said communications 
link comprising a wireless communications link, to 
transmit biometric data and biodata to the centralized 
server; and 
said portable computer programmed to: 

control said portable communications terminal to 
establish a communication link between the work- 
station and the centralized server; 
activate transmission of biometric data and biodata of 
an individual to be enrolled or identified by means of 
the established communication link to the remote 
centralized server; 
receive from the centralized server by means of the 
established communication link identification of the 
plurality of databases containing biodata and/or bio- 
metric data stored at the centralized server matching 
or closely matching biometric data of an individual 
to be enrolled or identified received at the biometric 
data input system; 
activate a display of said portable computer to present 
menus for a user to select specific functions based on 
the identified databases including search for and 
enroll an individual, search only for an individual for 
identification, and verify the enrollment of an indi- 
vidual; and 

activate the display based on the selected specific 
function to present to a user the identified databases 
for evaluation of an individual for enrollment, veri- 
fication of enrollment, or identification from the 
identified databases having a defined meaning 
related to the received biodata and/or biometric data 
for an individual. 

2. The workstation of claim 1 further comprising said 
computer programmed to initiate said communications ter- 
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minal to receive from the centralized server over said 
communication link biometric information stored at said 
centralized server that matches or closely matches the input 
biometric data transmitted from said workstation to the 
centralized server. 

3. The workstation of claim 1 further comprising said 
computer programmed to initiate said communications ter- 
minal to receive from the centralized server over said 
communication Link information indicating that no stored 
biometric information at the centralized server matches or 
closely matches the input biometric data transmitted from 
said workstation to the centralized server. 

4. The workstation of claim 1 wherein: 

the input biometric data comprises input fingerprint data; 
the stored biometric data comprises stored fingerprint 
data; and 

said computer comprises programming to initiate said 
communications terminal to receive from the central- 
ized server over the commimication fink stored finger- 
print information matching or closely matching the 
input fingerprint data transmitted to the centralized 
server from said workstation. 

5. The workstation of claim 1 wherein: 

the input biometric data comprises input photographic 
data; 

the stored biometric data comprises stored photographic 
data; and 

said computer programmed to initiate said communica- 
tions terminal to receive from the centralized server 
over the communication link stored photographic infor- 
mation matching or closely matching the input photo- 
graphic data transmitted to the centralized server from 
said workstation. 

6. A distributed biometric enrolling and identification 
system for enrolling and identification of individuals by a 
user of a stand-alone workstation, the enrolling and identi- 
fication system comprising a centralized server having a 
plurality of databases each having a defined meaning related 
to the individuals to be enrolled or identified and one or 
more stand-alone workstations in communication with the 
centralized server, wherein one or more of said stand-alone 
workstations comprise: 

a portable computer; 

a fingerprint scanner coupled to said portable computer, 
said fingerprint scanner receiving input fingerprint 
information of an individual to be enrolled or identified 
and providing said input fingerprint information to said 
computer; 

a camera coupled to said portable computer, said camera 
receiving input photographic information of an indi- 
vidual to be enrolled or identified and providing said 
input photographic information to said computer; 

a user input terminal for enabling a user to input to the 
portable computer non-biometric data (biodata) of an 
individual to be enrolled or identified; 

a portable communications terminal coupled to said por- 
table computer; 

said communications terminal initiating the establishment 
of a communication link between said workstation and 
the centralized server remotely located from said 
workstation, at least a portion of said communications 
link comprising a wireless communications link; 

said portable computer programmed to: 

control said portable communications terminal to 
establish a commumication link between the work- 
station and the centralized server; 
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activate transmissioD of bio me trie data and biodata of 
an individual to be enrolled or identified by means of 
the established communication link to the remote 
centralized server; 

receive from the centralized server by means of the 5 
established communication link identification of the 
plurality of databases containing biodata and/or bio- 
metric data stored at the centralized server matching 
or closely matching biometric data of an individual 
to be enrolled or identified received at the fingerprint lO 
scanner or the camera; 

activate a display of said portable computer to present 
menus for a user to select specific functions based on 
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the identified databases including search for and 
enroll an individual, search only for an individual to 
be identified, and verify the enrollment of an indi- 
vidual; and 

activate the display based on the selected specific 
function to present to the user one or more identified 
databases for evaluation of an individual for 
enrollment, verification of enrollment, or identifica- 
tion from the one or more identified databases having 
a defined meaning related to the received biodata 
and/or biometric data for an individual. 

* * * 4 * 
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